/Vulnerability Library

WordPress Check & Log Email < 2.0.15 - SQL Injection

CVE-2026-14554
Early Release

Description

The Check & Log Email WordPress plugin before 2.0.15 does not properly sanitize and escape parameters before using them in SQL queries, allowing users with administrator privileges to perform SQL injection attacks.

Severity

Medium

CVSS Score

6.5

Exploit Probability

0%

Affected Product

check-email

Published Date

October 26, 2026

Template Author

anirbala98

CVE-2026-14554.yaml
6.5Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVE ID:
cve-2026-14554
CWE ID:
cwe-89

References

https://wpscan.com/vulnerability/7b39bae3-41a2-4862-b7c3-1a386273d600/https://nvd.nist.gov/vuln/detail/CVE-2026-14554https://wordpress.org/plugins/check-email/

Remediation Steps

Update to version 2.0.15 or later.